mdn / content

The content behind MDN Web Docs
https://developer.mozilla.org
Other
8.88k stars 22.43k forks source link

Imprecise Access-Control-Request-Headers examples give practitioners false expectations #33313

Closed jub0bs closed 2 weeks ago

jub0bs commented 3 weeks ago

MDN URL

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Request-Headers

What specific section or headline is this issue about?

Directives and Examples

What information was incorrect, unhelpful, or incomplete?

The text and examples are misleading about the laxity of the format that the Fetch standard imposes on the Access-Control-Request-Headers header. This lack of precision can trip practitioners up: https://github.com/rs/cors/issues/176

What did you expect to see?

The Fetch standard requires browsers to construct a sorted list of unique, comma-delimited, byte-lowercase tokens corresponding to the CORS-unsafe request-header names. The text and the examples should reflect that.

Do you have any supporting links, references, or citations?

Do you have anything more you want to share?

Other pages of MDN Web Docs are affected.